qrexec: qubes.ReceiveUpdates should allow the service only from the default UpdateVM

[marmarek]

Reported by joanna on 17 Jul 2011 20:58 UTC
... and not from 'anyvm'

Migrated-From: https://wiki.qubes-os.org/ticket/280

[marmarek]

Comment by marmarek on 17 Jul 2011 22:02 UTC
This is enforced from within qubes-receive-updates.
And no - qrexec_policy is not right place for it - it should be simple, not with many (non disjunctive) cases like UpdateVM, ClockVM, NetVM, ProxyVM etc.

[marmarek]

Comment by marmarek on 17 Jul 2011 22:02 UTC
This is enforced from within qubes-receive-updates.
And no - qrexec_policy is not right place for it - it should be simple, not with many (non disjunctive) cases like UpdateVM, ClockVM, NetVM, ProxyVM etc.

[marmarek]

Modified by rafal on 25 Jul 2011 07:45 UTC

[marmarek]

Modified by rafal on 25 Jul 2011 07:45 UTC